How browser extensions steal logins & browsing habits; conduct corporate espionage
by Cory Doctorow from on (#VCGV)
Seemingly harmless browser extensions that generate emojis, enlarge thumbnails, help you debug Javascript errors and other common utilities routinely run secret background processes that collect and retransmit your login credentials, private URLs that grant access to sensitive files, corporate secrets, full PDFs and other personally identifying, potentially compromising data. (more")